Skip to content
EXYS

CVE Intelligence

Exploited and newly published vulnerabilities, ranked by whether they are being used, how likely they are to be, and whether a patch exists.

CVEs held
3,164
each with its own record page
KEV listed, 30 days
35
newest 16 Oct 2026
Ransomware-linked
361
confirmed by CISA
Public exploit
883
exploit code referenced
Vendors
646
named in affected products
EPSS 90% or more
468
100% already known exploited

Counts of what we hold, not of every CVE ever filed. Collected from NVD, the CISA KEV catalogue (version 2026.10.16) and FIRST EPSS. Last collected .

Results

Our full local dataset: the complete known-exploited catalogue plus the high- and critical-severity CVEs published inside the collection window. It is a few thousand records, not the full CVE corpus; anything older and never exploited is not here.

Quick filters

has:exploit exploit code published epss>90 likely to be attacked is:ransomware used by ransomware groups (in the search, select to remove) is:overdue past the CISA deadline (in the search, select to remove) cvss>=9 critical severity age<7 published this week vendor:microsoft,adobe,ibm most affected vendors

Reading your query as: ransomware-linked past its KEV remediation deadline clear

CVEs in the Everything we hold view, sorted by Published
CVE Title Vendor KEV listed Published EPSS CVSS Signals
CVE-2021-26411 CVE-2021-26411 Microsoft 81% 8.8, high ransomware overdue patch 2
CVE-2021-27065 CVE-2021-27065 Microsoft 100% 7.8, high ransomware overdue exploit 2 patch 2
CVE-2021-26858 CVE-2021-26858 Microsoft 94% 7.8, high ransomware overdue patch 2
CVE-2021-26857 CVE-2021-26857 Microsoft 96% 7.8, high ransomware overdue patch 2
CVE-2021-26855 CVE-2021-26855 Microsoft 100% 9.1, critical ransomware overdue exploit 4 patch 2
CVE-2021-27878 CVE-2021-27878 Veritas 24% 8.8, high ransomware overdue exploit 1 advisory 1
CVE-2021-27877 CVE-2021-27877 Veritas 65% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2021-27876 CVE-2021-27876 Veritas 14% 8.1, high ransomware overdue exploit 1 advisory 1
CVE-2021-1732 CVE-2021-1732 Microsoft 78% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2021-21972 CVE-2021-21972 VMware 100% 9.8, critical ransomware overdue exploit 3 advisory 1
CVE-2021-27104 CVE-2021-27104 Accellion 57% 9.8, critical ransomware overdue advisory 2
CVE-2021-27103 CVE-2021-27103 Accellion 11% 9.8, critical ransomware overdue
CVE-2021-27102 CVE-2021-27102 Accellion 4% 7.8, high ransomware overdue advisory 2
CVE-2021-27101 CVE-2021-27101 Accellion 6% 9.8, critical ransomware overdue advisory 2
CVE-2021-20016 CVE-2021-20016 SonicWall 40% 9.8, critical ransomware overdue advisory 1
CVE-2021-3129 CVE-2021-3129 Laravel and 1 more vendor 100% 9.8, critical ransomware overdue exploit 3 patch 1
CVE-2020-29574 CVE-2020-29574 Sophos 5% 9.8, critical ransomware overdue advisory 1
CVE-2018-19953 CVE-2018-19953 QNAP 29% 6.1, medium ransomware overdue advisory 1
CVE-2018-19949 CVE-2018-19949 QNAP 29% 9.8, critical ransomware overdue advisory 1
CVE-2018-19943 CVE-2018-19943 QNAP 21% 5.4, medium ransomware overdue advisory 1
CVE-2020-3580 CVE-2020-3580 Cisco 86% 6.1, medium ransomware overdue patch 1
CVE-2020-3992 CVE-2020-3992 VMware 83% 9.8, critical ransomware overdue patch 1 advisory 2
CVE-2020-5135 CVE-2020-5135 SonicWall 27% 9.8, critical ransomware overdue advisory 1
CVE-2020-0878 CVE-2020-0878 Microsoft 3% 4.2, medium ransomware overdue patch 1
CVE-2020-3433 CVE-2020-3433 Cisco 10% 7.8, high ransomware overdue exploit 1 advisory 1
CVE-2020-1472 CVE-2020-1472 Microsoft 99% 5.5, medium ransomware overdue exploit 2 patch 2
CVE-2019-5591 CVE-2019-5591 Fortinet 19% 6.5, medium ransomware overdue advisory 1
CVE-2020-12812 CVE-2020-12812 Fortinet 45% 9.8, critical ransomware overdue advisory 1
CVE-2020-5902 CVE-2020-5902 F5 100% 9.8, critical ransomware overdue exploit 10 advisory 2
CVE-2020-2021 CVE-2020-2021 Palo Alto Networks 4% 10, critical ransomware overdue advisory 1
CVE-2020-3259 CVE-2020-3259 Cisco 72% 7.5, high ransomware overdue advisory 1
CVE-2020-12271 CVE-2020-12271 Sophos 42% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2020-0968 CVE-2020-0968 Microsoft 31% 7.5, high ransomware overdue patch 1
CVE-2020-0796 CVE-2020-0796 Microsoft 100% 10, critical ransomware overdue exploit 6 patch 1
CVE-2020-0787 CVE-2020-0787 Microsoft 43% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2020-3153 CVE-2020-3153 Cisco 28% 6.5, medium ransomware overdue exploit 4 advisory 1
CVE-2020-0688 CVE-2020-0688 Microsoft 100% 8.8, high ransomware overdue exploit 2 patch 1
CVE-2020-0618 CVE-2020-0618 Microsoft 99% 8.8, high ransomware overdue exploit 2 patch 1
CVE-2020-0638 CVE-2020-0638 Microsoft 2% 7.8, high ransomware overdue patch 1
CVE-2019-19781 CVE-2019-19781 Citrix 100% 9.8, critical ransomware overdue exploit 5 advisory 5
CVE-2019-7481 CVE-2019-7481 SonicWall 100% 7.5, high ransomware overdue advisory 1
CVE-2019-18935 CVE-2019-18935 Progress 100% 9.8, critical ransomware overdue exploit 5 patch 1
CVE-2019-1458 CVE-2019-1458 Microsoft 74% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2019-5544 CVE-2019-5544 VMware and 3 more vendors 97% 9.8, critical ransomware overdue patch 1 advisory 5
CVE-2019-7195 CVE-2019-7195 QNAP 90% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2019-7194 CVE-2019-7194 QNAP 83% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2019-7193 CVE-2019-7193 QNAP 14% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2019-7192 CVE-2019-7192 QNAP 88% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2019-6693 CVE-2019-6693 Fortinet 7% 6.5, medium ransomware overdue advisory 1
CVE-2019-1405 CVE-2019-1405 Microsoft 30% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1388 CVE-2019-1388 Microsoft 9% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2019-1385 CVE-2019-1385 Microsoft 4% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2019-11043 CVE-2019-11043 PHP 100% 9.8, critical ransomware overdue exploit 4 advisory 23
CVE-2019-1322 CVE-2019-1322 Microsoft 19% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1315 CVE-2019-1315 Microsoft 3% 7.8, high ransomware overdue patch 1
CVE-2019-1367 CVE-2019-1367 Microsoft 52% 7.5, high ransomware overdue patch 1
CVE-2019-16057 CVE-2019-16057 D-Link 86% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2019-1253 CVE-2019-1253 Microsoft 12% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-1215 CVE-2019-1215 Microsoft 19% 7.8, high ransomware overdue patch 1
CVE-2019-13608 CVE-2019-13608 Citrix 30% 7.5, high ransomware overdue advisory 1
CVE-2019-15107 CVE-2019-15107 Webmin 100% 9.8, critical ransomware overdue exploit 6 advisory 2
CVE-2019-1579 CVE-2019-1579 Palo Alto Networks 46% 8.1, high ransomware overdue exploit 1 advisory 3
CVE-2019-1130 CVE-2019-1130 Microsoft 2% 7.8, high ransomware overdue patch 1
CVE-2019-1129 CVE-2019-1129 Microsoft 2% 7.8, high ransomware overdue patch 1
CVE-2019-1069 CVE-2019-1069 Microsoft 6% 7.8, high ransomware overdue exploit 1 patch 2
CVE-2019-1064 CVE-2019-1064 Microsoft 7% 7.8, high ransomware overdue patch 2
CVE-2018-13382 CVE-2018-13382 Fortinet 82% 7.5, high ransomware overdue advisory 2
CVE-2018-13379 CVE-2018-13379 Fortinet 100% 9.8, critical ransomware overdue advisory 2
CVE-2019-11580 CVE-2019-11580 Atlassian 95% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2018-13383 CVE-2018-13383 Fortinet 34% 6.5, medium ransomware overdue advisory 2
CVE-2019-11634 CVE-2019-11634 Citrix 8% 9.8, critical ransomware overdue advisory 2
CVE-2019-0708 CVE-2019-0708 Microsoft 100% 9.8, critical ransomware overdue exploit 5 patch 1
CVE-2019-11510 CVE-2019-11510 Ivanti 100% 10, critical ransomware overdue exploit 3 patch 1
CVE-2019-2725 CVE-2019-2725 Oracle 100% 9.8, critical ransomware overdue exploit 2 patch 4
CVE-2019-11539 CVE-2019-11539 Ivanti and 1 more vendor 99% 7.2, high ransomware overdue exploit 5 advisory 4
CVE-2019-0859 CVE-2019-0859 Microsoft 4% 7.8, high ransomware overdue patch 1
CVE-2019-0841 CVE-2019-0841 Microsoft 41% 7.8, high ransomware overdue exploit 6 patch 1
CVE-2019-0803 CVE-2019-0803 Microsoft 45% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-0752 CVE-2019-0752 Microsoft 82% 7.5, high ransomware overdue exploit 1 patch 1
CVE-2019-3396 CVE-2019-3396 Atlassian 100% 9.8, critical ransomware overdue exploit 4 patch 1
CVE-2019-0604 CVE-2019-0604 Microsoft 100% 9.8, critical ransomware overdue patch 1 advisory 1
CVE-2018-20753 CVE-2018-20753 Kaseya 30% 9.8, critical ransomware overdue exploit 1 advisory 1
CVE-2018-20250 CVE-2018-20250 RARLAB 96% 7.8, high ransomware overdue exploit 5 advisory 2
CVE-2017-18362 CVE-2017-18362 Kaseya 87% 9.8, critical ransomware overdue exploit 1 advisory 2
CVE-2018-13374 CVE-2018-13374 Fortinet 38% 4.3, medium ransomware overdue advisory 1
CVE-2018-15982 CVE-2018-15982 Adobe and 5 more vendors 90% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2019-0543 CVE-2019-0543 Microsoft 5% 7.8, high ransomware overdue exploit 1 patch 1
CVE-2018-19323 CVE-2018-19323 GIGABYTE 8% 9.8, critical ransomware overdue exploit 2 advisory 2
CVE-2018-19322 CVE-2018-19322 GIGABYTE 2% 7.8, high ransomware overdue exploit 2 advisory 2
CVE-2018-19321 CVE-2018-19321 GIGABYTE 4% 7.8, high ransomware overdue exploit 2 advisory 2
CVE-2018-19320 CVE-2018-19320 GIGABYTE 4% 7.8, high ransomware overdue exploit 2 advisory 2
CVE-2018-8639 CVE-2018-8639 Microsoft 22% 7.8, high ransomware overdue patch 1 advisory 1
CVE-2018-8581 CVE-2018-8581 Microsoft 27% 7.4, high ransomware overdue patch 1 advisory 2
CVE-2018-8453 CVE-2018-8453 Microsoft 70% 7.8, high ransomware overdue exploit 2 patch 1
CVE-2018-8440 CVE-2018-8440 Microsoft 18% 7.8, high ransomware overdue exploit 1 patch 2
CVE-2018-8406 CVE-2018-8406 Microsoft 3% 7.8, high ransomware overdue patch 1 advisory 2
CVE-2018-8405 CVE-2018-8405 Microsoft 3% 7.8, high ransomware overdue patch 1 advisory 2
CVE-2018-7602 CVE-2018-7602 Drupal 99% 9.8, critical ransomware overdue exploit 2 patch 1
CVE-2018-11138 CVE-2018-11138 Quest 92% 9.8, critical ransomware overdue exploit 2
CVE-2018-8174 CVE-2018-8174 Microsoft 88% 7.5, high ransomware overdue exploit 2 patch 1

Showing 201–300 of 361 records in this view matching your search. 3,137 of 3,164 carry an EPSS score and 3,164 a CVSS score; rows with no value in the sorted column are listed last either way, not counted as zero.

Rows 50 100 200

How to read this

KEV means attacked, CVSS means attackable

CVSS scores how severe a flaw would be if exploited. The KEV date says CISA has evidence it is being exploited. A 7.5 in KEV is a more urgent patch than an unexploited 9.8.

EPSS is a probability, not a score

The modelled chance of exploitation activity in the next 30 days, from FIRST. The hairline under it is drawn to the same scale, so a short line really is a small chance.

Signals are a hint, not an inventory

exploit 3 means three references were classified as exploit code, from NVD's tags or the shape of the URL. overdue means a CISA remediation deadline has passed.

A slice, collected daily

The whole KEV catalogue, however old, plus the high and critical CVEs published in the last 90 days. Scores are as of the last collection, not the live upstream state. NVD holds the rest.